Microsoft account
Email · account.microsoft.com
Five second factors on offer: authenticator app, approval in an app, text message, phone call and email code. The strongest is an authenticator app.
Recommended setup
Authenticator app
Codes made on your phone, offline. Much safer than a text message, which can be stolen with a SIM swap.
AppAuthenticator appBest option
PushApproval in an appMicrosoft Authenticator
SMSText messageSupported
CallPhone callSupported
EmailEmail codeSupported
Not offered: security key, hardware token.
Switch it on
General steps; menu names vary. Microsoft account's own guide has the exact screens.
- Sign in to Microsoft account and open your account's security settings. Look for two-step verification or two-factor authentication. Microsoft account's own guide shows the exact screens.
- Choose authenticator app. A QR code appears.
- Open your authenticator app, add an account and scan the QR code. Type the 6-digit code it shows to confirm.
- Save the backup codes. Keep them in your password manager or print them; they're your way back in if you lose your phone or key.
Before you start
!
One Microsoft account covers Outlook.com, Xbox, OneDrive and Microsoft 365 for home.